Apache 2.2 / Php 5 Update: Calling Files Behind Root
With my old Apache 1 and PHP4 I was able to pull files from behind the public_html using a php file without any problems. Is there a reason why this does not work with Apache 2.2 and PHP5?
the piece of coding below is what grabs the image. Right now i'm just seeing a red X for each image.
PHP Code:
if ($private == 1) {
header("Content-type: image/jpeg");
$im = imagecreatefromjpeg('/home/site1/private/' . $type . '/' . $mid . '-' . $iid . '.jpg');
imagecolorallocate($im, 255, 255, 255);
imagejpeg($im);
imagedestroy($im);
}
View Complete Thread with Replies
Sponsored Links:
Related Forum Messages:
Used Apache Update/some PHP Scripts No Longer Working
Having some issues here, I used Apache Update to install WHMCS as I didn't have Curl installed. Well had some issues using the username and password as it couldn't connect to the database, my modernbill and phpnuke scripts still work but some other scripts like joomla, some shopping cart software, and other MYSQL scripts are not working. I've run test scripts to see if I can connect to the database, got the following error with the PHP test script Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'data_invoice'@'localhost' (using password: YES) in /home/data/public_html/test2.php on line 4 I cannot connect to the database because:Access denied for user 'data_invoice'@'localhost' (using password: YES) Also attempted it in SSH and getting a similar error that access is denied. Username and password are correct. I believe I upgraded PHP which my guess is what caused this. I've searched the forum for a few solutions and I had the problem in the past which I fixed it, but it's been a while.
View Replies!
View Related
Apache Not Recognizing My .php Files
Yesterday I was told by my hosting provider that my machine was at kernel panic, so they restarted it and I restarted my webserver (Apache). I created a sub folder as I wanted to install a PHP script, so I created the folder using FTP and uploaded all of the script files. The problem is, when I now visit that URL, my browser is asking me to download the .php file instead of the webserver executing it: [url] My web host said this: it sounds like you aren't loading your php module library in your apache.conf and/or not associating the .php extension.
View Replies!
View Related
Apache 1.3 Not Parsing Any Kind Of PHP Files
I using RHES 4 + cPanel. I have MySQL 5.x, and PHP 4.4.6. I noticed that all sites on the server, can not parse php files, tried restarting httpd, recompiling using apache update or easyapache script, and the problem stills. index.php is at DirectoryIndex, also Addtype shows php extension active at httpd.conf. but, when I type "php -v" from the shell, i got this message: Code: php: /usr/lib/libmysqlclient.so.14: version `libmysqlclient_14' not found (required by php) I found someone with the same problem, tested the solution posted there but it doesnt seems to solve this issue.
View Replies!
View Related
Update Php And Website Showing Php Code
I have update php successfully 5.2.6 to 5.2.9. -bash-3.2# php -v PHP 5.2.9 (cli) (built: Apr 10 2009 00:53:01) Copyright (c) 1997-2009 The PHP Group Zend Engine v2.2.0, Copyright (c) 1998-2009 Zend Technologies i already restart the httpd but everytime I go to my website, php page is now showing my php page as php code. :/
View Replies!
View Related
Php Not Updating After Php Update On Centos
im trying to update my php version to 5.2+ so i can run phpmyadmin on my server. Ive tried two different methods both produced same results. First method was to download libxml2-2.7.3 and then do ./configure, make,etc then i download php, ./configure, make install, etc. At first i had to yum install make, then a c complier cause make and ./configure didnt work before that. After everything seemed to work fine until the end when it said you may have found a bug on php would you like to submit it? So obviously the php version didnt update at all. Next i tried adding a repo that already contained php-5.2.5 and then yum install php since centos only seems to support regular yum install up to php version 5.1.6. i did rpm and installed php and thought sweet ive updated php. Ran php -v and i am still running php version 5.1.6.
View Replies!
View Related
Getting Files Off The Root Server That Is Outside Web Access
I am actually very inexpirience in server management. I have a small - I believe - problem. I need to get config file onto my computer from my root server. I can access it through terminal, but it is not very confortable. The config file is on root server. the file is located at //etc/xxx.conf Do I need to use web browser to do it? If so how? Or is there a way that I log to my root server through ssh and transfer onto my computer?
View Replies!
View Related
Calling All Colocation Providers
where I should place my server. I hear good and bad things about all kinds of companies, and endless forum posts, so at times I get quite confused in which places are really good and bad. I currently have a full tower (not rackmount server) that I would like placed on a gbit link. I would need around 20mbps in bandwidth, and have a budget of 800$/month. Where should I go for such needs?
View Replies!
View Related
Apache Do Not Update
i enable Mbstrings and Soap in easyapache in Cpanel. after 24 hours i restart my server and some things get eror. tmp folder become read only. easy apache give below eror : Code: Died at /var/cpanel/perl/easy/Cpanel/Easy/Utils/BackGround.pm line 40. and all site have eror for tmp and mysql. i change tmp folder but some eror don't solved. Code: Can't create/write to file '/tmp/#sql_1f42_0.MYI' (Errcode: 30) SQL=SELECT m.*, sum(case when p.published=1 then 1 else 0 end) as cnt FROM jos_menu AS m LEFT JOIN jos_menu AS p ON p.parent = m.id WHERE m.menutype='mainmenu' AND m.published='1' AND m.access <= '0' GROUP BY m.id ORDER BY m.parent, m.ordering Warning: Invalid argument supplied for foreach() in /home/music/public_html/modules/mod_tpmenu/tpmenu/dropdown/menu.php on line 127 Warning: array_key_exists() [function.array-key-exists]: The second argument should be either an array or an object in /home/music/public_html/modules/mod_tpmenu/tpmenu/dropdown/menu.php on line 150 this is mount command : Code: /dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw,usrquota) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) /dev/sda1 on /boot type ext3 (rw) tmpfs on /dev/shm type tmpfs (rw) none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw) /usr/tmpDSK on /tmp type ext3 (rw,noexec,nosuid,loop=/dev/loop0) and this is fstabs : Code: /dev/VolGroup00/LogVol00 / ext3 defaults,usrquota 1 1 LABEL=/boot /boot ext3 defaults 1 2 tmpfs /dev/shm tmpfs defaults 0 0 devpts /dev/pts devpts gid=5,mode=620 0 0 sysfs /sys sysfs defaults 0 0 proc /proc proc defaults 0 0 /dev/VolGroup00/LogVol01 swap swap defaults 0 0 /usr/tmpDSK /tmp ext3 defaults,noauto 0 0
View Replies!
View Related
HOWTO Cron Job To Copy Files From Folder To Root
how to setup a cron job to copy files & directories from one folder to the root folder. I have CPanel X. My root directory is public_html/ I have another directory public_html/uploads containing both files and directories. I need a cron job that will copy all the files & directories from public_html/uploads to the root public_html/ If it helps, here is some system info General server information: Operating system Linux Service Status Click to View Kernel version 2.6.22_hg_grsec_pax Apache version 1.3.39 (Unix) PERL version 5.8.8 Path to PERL /usr/bin/perl Path to sendmail /usr/sbin/sendmail PHP version 4.4.4 MySQL version 4.1.22-standard cPanel Build 11.17.0-STABLE 19434 Theme cPanel X v2.6.0
View Replies!
View Related
PHP 5.2.8 Update
Did anyone have this problem when upgrade to PHP 5.2.8? This is the error that i got when i upgrade from PHP 5.2.6 to 5.2.8. "Failed loading C:PHP5ioncubeioncube_loader_win_5.2.dll PHP Warning: PHP Startup: Unable to load dynamic library './ext/php_mssql.dll' - The specified module could not be found. in Unknown on line 0 PHP Warning: PHP Startup: Unable to load dynamic library './ext/php_msql.dll' - The specified module could not be found. in Unknown on line 0 " I don't have Ioncube install and when i upgrade from PHP 5.2.5 to 5.2.6. I didn't have the above problem. Is Ioncube a included .dll in for the Windows package? How do i fix the above error? Is there any problem with PHP 5.2.8? Is it stable? My server is Win2003 Standard/IIS6.
View Replies!
View Related
Update Php To Lastest
I tried to run yum update php and it say there are no new packages available. This is on centos 5.2 with lxadmin installed so how can i update it? it has php 5.2.1 and the latest is 5.2.8.
View Replies!
View Related
Php 4.4.7 Update Error
/configure php? i got this error: Quote: checking for IMAP support... yes, shared checking for IMAP Kerberos support... yes checking for IMAP SSL support... yes checking for utf8_mime2text signature... new checking for U8T_CANONICAL... no configure: error: utf8_mime2text() has new signature, but U8T_CANONICAL is missing. This should not happen. Check config.log for additional information.
View Replies!
View Related
Apache Update Problems (yum)
Just started running a new VPS and have tried to update apache through WHM and I get this error : Checking Update System........Your operating system's rpm update method (yum) was not able to locate the glibc package. This is an indication of an improper setup. You must correct this error before you can proceed. Someone told me to check out yum so I ran a command that he told me too and got this output : Traceback (most recent call last): File "/usr/bin/yum", line 29, in ? yummain.main(sys.argv[1:]) File "/usr/share/yum-cli/yummain.py", line 94, in main result, resultmsgs = base.doCommands() File "/usr/share/yum-cli/cli.py", line 381, in doCommands return self.yum_cli_commands[self.basecmd].doCommand(self, self.basecmd, self.extcmds) File "/usr/share/yum-cli/yumcommands.py", line 150, in doCommand return base.updatePkgs(extcmds) File "/usr/share/yum-cli/cli.py", line 672, in updatePkgs self.doRepoSetup() File "/usr/share/yum-cli/cli.py", line 109, in doRepoSetup self.doSackSetup(thisrepo=thisrepo) File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 338, in doSackSetup self.repos.populateSack(which=repos) File "/usr/lib/python2.4/site-packages/yum/repos.py", line 200, in populateSack sack.populate(repo, with, callback, cacheonly) File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 91, in populate dobj = repo.cacheHandler.getPrimary(xml, csum) File "/usr/lib/python2.4/site-packages/yum/sqlitecache.py", line 100, in getPrimary return self._getbase(location, checksum, 'primary') File "/usr/lib/python2.4/site-packages/yum/sqlitecache.py", line 93, in _getbase self.updateSqliteCache(db, parser, checksum, metadatatype) File "/usr/lib/python2.4/site-packages/yum/sqlitecache.py", line 382, in updateSqliteCache cur.execute("DELETE FROM "+table+ " where pkgKey in %s" % delpkgs) File "/usr/lib/python2.4/site-packages/sqlite/main.py", line 244, in execute self.rs = self.con.db.execute(SQL) _sqlite.DatabaseError: unable to open database file Its the database error that worries me, can anyone help me out with how to fix this? Running WHM 11.2.0 cPanel 11.11.0-S16999 CENTOS Enterprise 5 i686 - WHM X v3.1.0
View Replies!
View Related
Error When Trying To Run Apache Update (cPanel)
I got a new server online today with a fresh installation of centos and cPanel: WHM 11.15.0 cPanel 11.18.1-R20683 CENTOS Enterprise 5 i686 on standard - WHM X v3.1.0 I have done the initial setup (ip's nameservers etc..) but when I try and run apache update I get the following: Premature end of script headers: /usr/local/cpanel/whostmgr/docroot/cgi/easyapache.pl: Please check /usr/local/cpanel/logs/error_log for the exact error. I look in the log file but it just repeatse the above error and doesnt supply any additional info.
View Replies!
View Related
POP Server Error After Apache Update
I run a dedicated server with WHM/cPanel (10.8.0). I was recently supposed to update the Apache installation to add a module, but instead of clicking "load previous config" I clicked on "start build" by mistake. This brought the installation back to default. I waited till the build was finished and then added all the modules I could remember having installed earlier. This made Apache not wanting to start. I went back to the default and then recompiled apache over and over again, adding 1 o 2 modules every time. Apache booted up fine, but for some reason my mail is suddenly acting up. I keep getting the following error on one of my domain in my client: Code: Unable to connect to POP server mail.example.com. Error sending password: -ERR Maildir invalid (no 'cur' directory) When I click OK, I get: Code: Unable to connect to POP server mail.example.com. Error sending password: Operation now in progress I have a couple of other accounts in the mail client. None of them are receiving mails, even though I can see that there are new mails present in the mailbox via webmail. My exim is configured to use mbox as far as I know. So I don't understand why I'm getting an invalid maildir message.
View Replies!
View Related
Apache Parent Owns Root
Why apache parent process still owned by root user. ========= root@server:~# ps aux | grep apache2 root 30161 0.0 0.8 35588 8368 ? Ss 17:41 0:00 /usr/sbin/apache2 -k start www-data 30166 0.0 0.7 36080 7196 ? S 17:41 0:00 /usr/sbin/apache2 -k start ...
View Replies!
View Related
Apache Document Root On Linux
Basic question: does it matter where I set the document root for apache on a Linux system? I've googled this but haven't found a good answer. This is for a VPS server running the Ubuntu (Debian) server os that I'm configuring. I'd prefer to simply create a new directory off the root and set that as the document root in the apache config file. Would this present any kind of security issue? If that's no good, what's the best choice -- stick to the default?
View Replies!
View Related
Server Update, Too Many Apache Processes But Low Load
I have 2 almost similar webservers: debian 3.2, P4 3GHZ, 1 Gb ram, kernel 2.6, apache2, php4 Initial apache2.conf: Code: Timeout 4 KeepAlive Off KeepAliveTimeout 2 ServerLimit 1500 <IfModule prefork.c> StartServers 10 MinSpareServers 10 MaxSpareServers 15 MaxClients 1500 MaxRequestsPerChild 3000 </IfModule> I update the sources.list on server 1 to mirrors of the new debian 4 etc . I run apt-get update and apt-get dist-upgrade . A whole bunch of things get updated (it was long time ago that I did this anyway). After some troubles with /boot/grub/menu.lst the server boots ok, and everything is well. This server used to have loads of 15-25 at peak times, but after the update its running very smooth with loads of 2-3 at the same peak times. I dont know why exactly, as I noticed updates in OS , kernel version (from 2.6.8x to 2.6.18) , apache2 , php (4.4.4-8+etch1) , and I also needed to update eaccelerator from 0.94 to 0.95 . A few days later I update server 2. Everything seems to go the same, although the kernel version stays at 2.6.8-3-686. I dont think kernel version at start was exactly same at server 1. But the new php version is the same as server 1, and everything else looks the same too. But when peak times are coming up, this server starts to have troubles. It is quickly rising to total of 200-300 processes , while server 1 always stays stable at 60-70. Server 2 also reacts slow if I click somewhere on the site. It takes 5-10 seconds to show a new page. However the load stays pretty low at 1-2 . I see no big cpu usage and also no big memory usage. I have the impression that this server 2 is somehow wasting a lot of apache processes and is making things hard for itself without a real reason. When I check the seperate mysql database server, I also notice a lot of processes. Around 200-250 whereas it used to be 40-60. Sometimes this adds up so hard, that all webservers are blocked because mysql has too much processes. When I check the mysql connections, I see a few dozen things like 'unauthen ip:port Connect login' just hanging. All of them have the ip of webserver 2. Those extra apache processes are somehow hanging on to the mysql server without really doing something. I dont know what is happening, but this server is underperforming very badly now. I managed to limit the problem by drastically lowering ServerLimit and MaxClients on webserver 2 , but this is no real solution. The server is still slow, at least now its not bringing down the others. My question : what should I check for now ? I noticed a different structure in the conf files in debian etch, maybe something new has a bad influence on my old conf files? Is there something wrong with the combination of kernel+php version? I have no idea, please point me in the right direction so I can learn from this.
View Replies!
View Related
Mysql Insert/Update Makes Apache Go Crazy
I run a wordpress blog with apache2+mysql5+php5 in a Debian vps with 1024mb ram (plus swap). When you read the website everything works quick and smooth, but when you have to add data to the database (edit posts, write posts, write comments) something weird happens. monitoring the system with the top and I see that, for example, as soon as an article has been posted (already got the "article posted" message in the page) the free ram goes suddenly down (some seconds) from 800mb to 0. Swapping starts and the website stops responding. in the meanwhile cpu "wa" goes high (90%++). Typing ps aux I can see that is not mysql process's fault, actually it seems more that it's apache to cause this ram hogging, in fact an apache restart brings back tons of free ram. this is my current my.cnf: Code: client] port= 3306 socket= /var/run/mysqld/mysqld.sock # Here is entries for some specific programs # The following values assume you have at least 32M ram # This was formally known as [safe_mysqld]. Both versions are currently parsed. [mysqld_safe] socket= /var/run/mysqld/mysqld.sock nice= 0 [mysqld] # # * Basic Settings # user= mysql pid-file= /var/run/mysqld/mysqld.pid socket= /var/run/mysqld/mysqld.sock port= 3306 basedir= /usr datadir= /var/lib/mysql tmpdir= /tmp language= /usr/share/mysql/english skip-external-locking # # Instead of skip-networking the default is now to listen only on # localhost which is more compatible and is not less secure. bind-address= 127.0.0.1 # # * Fine Tuning # myisam_sort_buffer_size=64M max_connect_errors=20 connect_timeout=15 interactive_timeout=100 join_buffer_size=1M sort_buffer_size=1M read_buffer_size=1M bulk_insert_buffer_size=16M key_buffer= 64M max_allowed_packet= 16M thread_stack= 128K thread_cache_size= 8 max_connections = 600 table_cache = 256 #thread_concurrency = 10 # # * Query Cache Configuration # query_cache_limit = 1M query_cache_size = 16M # # * Logging and Replication # # Both location gets rotated by the cronjob. # Be aware that this log type is a performance killer. #log= /var/log/mysql/mysql.log # # Error logging goes to syslog. This is a Debian improvement :) # # Here you can see queries with especially long duration #log_slow_queries= /var/log/mysql/mysql-slow.log #long_query_time = 2 #log-queries-not-using-indexes # # The following can be used as easy to replay backup logs or for replication. #server-id= 1 #log_bin= /var/log/mysql/mysql-bin.log # WARNING: Using expire_logs_days without bin_log crashes the server! See README.Debian! #expire_logs_days= 10 #max_binlog_size = 100M #binlog_do_db= include_database_name #binlog_ignore_db= include_database_name # # * BerkeleyDB # # Using BerkeleyDB is now discouraged as its support will cease in 5.1.12. skip-bdb # # * InnoDB # # InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/. # Read the manual for more InnoDB related options. There are many! # You might want to disable InnoDB to shrink the mysqld process by circa 100MB. skip-innodb # # * Security Features # # Read the manual, too, if you want chroot! # chroot = /var/lib/mysql/ # # For generating SSL certificates I recommend the OpenSSL GUI "tinyca". # # ssl-ca=/etc/mysql/cacert.pem # ssl-cert=/etc/mysql/server-cert.pem # ssl-key=/etc/mysql/server-key.pem
View Replies!
View Related
Php Includes Issue On Linux Server With Apache 2.0.63 / Php 5.2.6
I am having some trouble with getting 'include' working. I have a new dedicated server running Apache 2.0.63 and PHP 5.2.6. Local includes on the same domain are running ok, but remote includes are throwing a problem. On the many sites we plan to host on this servber we use a central 'webmaster' page called as an include from a specific site (also on the same server). I need to edit the PHP.ini and /or recompile the PHP with the appropriate modules to do one of the following... 1 (ideally) - allow includes from any site that is held on this dedicated server 2. allow includes from specified websites 3. simply allow remote includes right settings to get one of these options running and solve my problem?
View Replies!
View Related
Recommend An ISP For Webspace? (need Php + Mysql + Root SSH Access)
cheap-ish place to host a PROTOTYPE website. We're going to need php + mysql, but we're going to need to have more control such as root SSH access. Here is the list of what we need to start with: SSH access PHP 5 Java MYSQL 4 or 5 Apache 2 SendMail Any ISP recommendations? For now this is just a prototype, and it will NOT get hammered with traffic. But we do need an outfit that is efficient and reliable. Ship Shiperton Henethe We are based in the UK.
View Replies!
View Related
Installed Apache And PHP Only Seeing Default Apache Page
I am having an issue where I have a server that Directadmin is installed on. I go to the a url that is on the server and all i see is the default page of apache saying congrats, it is installed. Although there is no file like that in the public_html any longer and I can see my files in the public_html folder of that specific site.
View Replies!
View Related
Apache/MySQL/PHP Issue - PHP Not Loading
I've got a server that was running Apache 2.0/PHP 5.2.5 & MysQL 5.0 just fine, however I needed to upgrade to a newer version of MySQL. So I uninstalled MySQL 5.0 and installed MySQL 5.1, copied the MySQLlibs over, and recompiled Apache/PHP with easyupdate. Apache & MysQL both start/run fine without errors, however PHP files don't load. Just get black pages (HTML works fine obviously). I went ahead and updated to Apache 2.2 & PHP 5.2.6 while I was at it, but that doesn't change things. I'm not sure why uninstalling MysQL & reinstalling would break any dependencies, but looks like thats the case. Perhaps I need to reinstall some libraries? Or would it be easier just to reinstall Apache/PHP entirely? I have no data.
View Replies!
View Related
Php Files Pop-up Sometimes
In the last couple of days my server/website has been acting a little strange and I can't recall doing anything to it in this time. 1) Now and again a normal PHP page will pop-up in the Firefox download manager. Usually the page is simply compiled and shown to the browser. 2) Images that really are present on the server sometimes randomly don't show in IE. PHP 5.1.4 MYSQL 5.0.27 Apache 1.3.37 APC 3.0.12p2 (latest)
View Replies!
View Related
Parsing EML Files On Apache
to open EML files on apache webserver, actually when I load an eml (outlook email message) by using an URL, it shows the email code, it is not pasing it correctly. What libraries (apache or system) do I need installed to parse this kind of files? Im using apache 2.0.6.3, php 5.2.6 and RHE 5.2
View Replies!
View Related
How To Avoid That Files Belong To Apache
I'm moving to a dedicated server for first time in my life and I have some questions that I want to share with you all. I have run many scripts like joomla, vbulletin, etc, and I have found that when I install a module or template or when I upload images using this scripts, the permisions of this files are wrongly assigned as they belong to apache:apache instead of myuser:mygroup. The problem is that as my new server is going to be fully managed, I am not going to have root access to chmod this files to the right myuser:mygroup and as a consecuence I'm going to be unable to dmove or delete them usinf my ftp or shh user acount. Hope you can help me this this issue. I need to tell my hosting company what I want to do to avoid this way of working but I have no idea of how can this be solved
View Replies!
View Related
PHP Files Not Work On My Server
I have a dedicated server, on this server I have only 2 website. I created an account before and that account work correctly. now I created a new account and when I trying to run a simple php file show me "Internal Server Error". I can view html files and I haven't .htaccess file . Server Inofrmation: CentOS , cPanel , Apache 2, PHP 5
View Replies!
View Related
PHP Files In IIS Blocked
I setup php on my IIS in my box and i know i set it up correctly, but each time i reinstall it because of this error i keep getting it. When i try to see any php file on my IIS through a web browser it shows me some login page no matter what kind of php file it is. If its html or asp it works fine like here 66.221.255.17 or 66.221.255.17/index.html but this doesnt work it shows some login 66.221.255.17/index.php and so do all other php files.
View Replies!
View Related
Check Which Php Files Are Running
When I am having server issues with my VPS, tech support comes back with something like Quote: Following processes are using CPU resources. Top Process %CPU 56.4 httpd [ www .myurl.com ] [/php/index.php?qdGFnZ2VkLmNvbQ--&hl1111101001 ] Top Process %CPU 53.5 httpd [ www .myurl.com] [/php/index.php?qdGFnZ2VkLmNvbQ--&hl1111101001] Top Process %CPU 25.4 httpd [ www .myurl.com] [/php/index.php?qaHR0cDovL3d3dy50YWdnZWQuY29tLw%3D%3D] Can you check which php files are running? where does that come from? I know they use shell access but where is that info?
View Replies!
View Related
Find Out Which .conf Files Apache 2.2 Is Loading
Is there a way to get Apache to tell me which .conf file it is loading at start-up? There's a box that's misbehaving and Apache is running on port 80 and 8080 on the box... but we can't locate *why* it's running on port 8080. I can't find any Listen 8080 statement in the typical config files. If I knew which config files it was loading, I could go through all of the files in more detail.
View Replies!
View Related
Hacker Detection On Apache Log Files
I have a client that is certain someone is trying to hack her web-portal. I need to set up something that will alert me on suspicious activity on the server. For example someone fiddling with requests trying to make SQL / shell .. injection and similar threats. Does any tool (for example bash script with grep) exist that would parse the raw apache logs and report if something is suspicious. Apache logs don't show the POST data so I am talking to admin to setup dump_io apache mod that enables this. Or am I going into wrong direction here and there is whole another way to do this? I searched the web and forums for anything like this and didn't find anything.
View Replies!
View Related
Prevent PHP Files Used For File Uploading
It appears that some people like to take advantage of those files for online web applications such as Wordpress which have php files with permissions set to 777. They use those as a means of creating an upload file. The upload files that they create then have access to the whole server somehow... Is there anyway of preventing this from happening?
View Replies!
View Related
Internal Server Error For All Php Files
I switched over a new host and everything was working perfectly. I then uploaded one last directory but it had a weird internal server error when trying to access the index.php file. I then googled it and changed directory permissions to 755, and I am not sure if it is a coincidence but now every site on my server with php files displays that error but html pages are fine.
View Replies!
View Related
Cron Jobs Not Executing PHP Files
I have a new dedicated server and am trying to set up a cron job via CPanel on on of my accounts (we'll call it "abc" account). In the Cron job area, where it asks for the command to run, I enter this: /home/abc/public_html/forum/class/sendnotice.php But when the job runs, it doesn't seem to be executing the .php file. Instead, I get stuff like this via email: /home/acb/public_html/forum/class/sendnotice.php: line 1: ?php: No such file or directory /home/abc/public_html/forum/class/sendnotice.php: line 2: ////////////////////////////: is a directory /home/abc/public_html/forum/class/sendnotice.php: line 3: //: is a directory /home/abc/public_html/forum/class/sendnotice.php: line 4: //: is a directory /home/abc/public_html/forum/class/sendnotice.php: line 5: //: is a directory /home/abc/public_html/forum/class/sendnotice.php: line 6: //: is a directory /home/abc/public_html/forum/class/sendnotice.php: line 7: //: is a directory /home/abc/public_html/forum/class/sendnotice.php: line 8: //: is a directory /home/abc/public_html/forum/class/sendnotice.php: line 9: //: is a directory So it is as if the cron job is reading each line of the .php file instead of just running it. Am I doing something wrong in setting up the cron job to run that file or could it be a configuration issue with the new server?
View Replies!
View Related
People Uploading Much Bigger Files To My Server, That I Want (using Php)
i have free hosting server and a rule to upload 3MB file max. it works for FTP, but somehow it doesn't work for php. It seems for php the limit on my server is 100MB (no idea why) i use following directives to limit file size in php.ini : ; Maximum size of POST data that PHP will accept. post_max_size = 4M (4 just for some margin ) ; Maximum allowed size for uploaded files. upload_max_filesize = 3M and i still can find 100MB files on disk. this is part of log file from apache from the account that uploaded it to me: Code: boorako.[] someip - - [13/May/2007:12:21:22 +0200] "POST /a/redir.php?capthatag=accesscode&saveto=&path=/some/path/boorako.[]/a&comment=&domail=&email=&useproxy= &proxy=&split=&method=tc&partSize=10&redirto=/a/index.php&link=redir.php?capthatag=accesscode&saveto=&path= /some/path/boorako.[]/a&comment=&domail=&email=&useproxy=&proxy=&split=&method=tc&partSize=10&redirto= /a/index.php&link=[url] HTTP/1.1" 302 188 [url] boorako.[] someip - - [13/May/2007:12:21:35 +0200] "POST /a/redir.php?capthatag=accesscode&saveto=&path=/some/path/boorako.[]/a&comment= &domail=&email=&useproxy= &proxy=&split=&method=tc&partSize=10&redirto=/a/index.php&link=redir.php?capthatag=accesscode&saveto=&path= /some/path/boorako.[]/a&comment=&domail=&email=&useproxy=&proxy=&split=&method=tc&partSize=10&redirto= /a/index.php&link=[url] HTTP/1.1" 302 188 [url] "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3" as the effect of this (at least i think so), there was 100MB file in his home dir. any idea how can he POST such big files even with those two directives? i have also set LimitRequestBody to 5194304 and LimitXMLRequestBody to 5194304 in apache2.conf which also should stop files being POSTED as big as 100MB. i have php 4.4.4-9, Linux Debian, apache 2.2.3 working in worker mpm, and php as fastcgi. P.S. i removed server info like IP, dir and address to not show specifics about my server in public, i put [] there.
View Replies!
View Related
Hacker Adds Malicious Code To All Html And Php Files
we have been having a strange hacking problem on our server that we can not seem to find how they are managing to accompish. I am just wondering if anyone here may be able to offer any suggestions on this? The problem: On our server, a hacker has managed to add malicious code to all html and php files on two hosting accounts that we operate. These two accounts are seperate and do not share login information. This is the 2nd time this has happened within the past two weeks. Originally it was suspected that we needed to add SuPhp to prevent insecure permissions. This has been done, yet the problem continues. On all html pages, malicious javascript has been added, and on all php files malicious php code has been added. We have a lot of accounts on this server, and as mentioned only the two accounts seem to have been affected by this. What we have done to attempt to secure the server: 1) We have installed SuPhp. 2) We have ensured that all scripts on the affected websites are updated and running the latest versions. 3) We have changed all the passwords. Our server is a managed server, and our server company has been very helpful, however at the moment can not seem to pinpoint the problem. There also does not appear to be any indication via the access logs of the infected files being altered, yet they have been altered. The computers used to access these websites are clean, and do not have any malware running, which would allow a hacker to obtain any passwords. It also does not appear that the hacker was able to obtain root access. One other thing I noticed, we run Kayako on one of the sites. When this problem occurs we receive a message that Zend Optimizer is not installed on our server when attempting to login to Kayako, when in fact it is. Searching Google, I found the following link on the Zend site in which the symptoms seem to be very similar. What are the odds this could be a Zend vulnerabilty? [url]
View Replies!
View Related
Rkhunter :: 'not Found' In Local Files And Unknown For Exim And Php 5.2.5
how to fix rkhunter from; 'not found' in local files and unknown for exim and php 5.2.5. System checks * Allround tests Checking hostname... Found. Hostname is Checking for passwordless user accounts... OK Checking for differences in user accounts... OK. No changes. Checking for differences in user groups... OK. No changes. Checking boot.local/rc.local file... - /etc/rc.local [ OK ] - /etc/rc.d/rc.local [ OK ] - /usr/local/etc/rc.local [ Not found ] - /usr/local/etc/rc.d/rc.local [ Not found ] - /etc/conf.d/local.start [ Not found ] - /etc/init.d/boot.local [ Not found ] * Application version scan - Exim MTA 4.68 [ Unknown ] - GnuPG 1.2.6 [ Old or patched version ] - Apache [unknown] [ OK ] - Bind DNS 9.2.4 [ OK ] - OpenSSL 0.9.7a [ Old or patched version ] - PHP 5.2.5 [ Unknown ] - PHP 5.2.5 [ Unknown ] - Procmail MTA 3.22 [ OK ] - OpenSSH 3.9p1 [ OK ]
View Replies!
View Related
Simpleish PHP/flat Files - Create File, Edit, Save
Display some text in a web browser from a file called text.txt text.txt will have many lines and some of them I do not want users to be able to modify and overwrite. config_item_1=user can edit config_item_2=user should see but not edit (could be on any line) config_item_3=user can edit config_item_4=user can edit The user has made their changes in the web browser and clicks submit. I then need this info to be saved as the text.txt file however some checking needs to be done first. Anything matching config_item_2 should be removed. This could be on any line. Anything not matching should be permitted and added.
View Replies!
View Related
|
TRACKER
